Lucene search
+L

4 matches found

OSV
OSV
added 2024/10/14 5:15 p.m.5 views

CVE-2024-45734

In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...

4.3CVSS5.8AI score0.00349EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/10/14 5:3 p.m.16 views

CVE-2024-45734 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...

4.3CVSS7.2AI score0.00349EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/14 5:3 p.m.31 views

CVE-2024-45734 Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could view images on the machine that runs Splunk Enterprise by using the PDF export feature in Splunk classic dashboards. The images on the machine could be exposed...

4.3CVSS0.00349EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/14 12:0 a.m.28 views

Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3 (SVD-2024-1004)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1004 advisory. - In Splunk Enterprise versions 9.3.0, 9.2.3, and 9.1.6, a low-privileged user that does not hold the admin or power Splunk rol...

4.3CVSS5.7AI score0.00349EPSS
Exploits0References2
Rows per page
Query Builder